Static task
static1
Behavioral task
behavioral1
Sample
2ec5278f550eb1a5020918ae00fe9c7e680ab7906adef61889b6646f0527f77a.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2ec5278f550eb1a5020918ae00fe9c7e680ab7906adef61889b6646f0527f77a.dll
Resource
win10v2004-20230703-en
General
-
Target
2ec5278f550eb1a5020918ae00fe9c7e680ab7906adef61889b6646f0527f77a
-
Size
81KB
-
MD5
4eeebd5b62e96960f31844b34be27dd9
-
SHA1
f98fa55a238575ea49c284aabfba0dfb53d7702a
-
SHA256
2ec5278f550eb1a5020918ae00fe9c7e680ab7906adef61889b6646f0527f77a
-
SHA512
3ec768baaa7fd5554d1628a58b2c088b2737c73c8762b0cfe48d76a489702c1462f3336fcf4d2b5ef244d9a94b661f95c30d875ea2d3250a0373a709f3765dfd
-
SSDEEP
1536:0VEM46TuJ6BIlmg3Fhy4j88AUaJuBzygS+sWycdLqlKliBgN:/M46jBIlD1hy4j7zygVLqlKlUgN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ec5278f550eb1a5020918ae00fe9c7e680ab7906adef61889b6646f0527f77a
Files
-
2ec5278f550eb1a5020918ae00fe9c7e680ab7906adef61889b6646f0527f77a.dll windows x86
6ba07c96f342379dec4a9c2bcf37be94
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
InitializeCriticalSectionEx
HeapSize
MultiByteToWideChar
GetLastError
DisableThreadLibraryCalls
HeapReAlloc
HeapAlloc
DecodePointer
DeleteCriticalSection
HeapFree
GetModuleHandleW
SetLastError
GetProcAddress
FreeLibrary
CreateFileW
GetConsoleOutputCP
GetProcessHeap
WriteFile
FlushFileBuffers
GetStringTypeW
SetStdHandle
IsDebuggerPresent
OutputDebugStringW
RaiseException
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
SetFilePointerEx
GetConsoleMode
GetStdHandle
GetFileType
LCMapStringW
CloseHandle
WideCharToMultiByte
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ